$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa File: AS200226.roa (raw, json) Hash identifier: GM2c+qeJq7DoyzAvE+CPCxw+/u1L86t5qiwCh+LBMTY= Subject key identifier: C9:A1:1C:ED:9A:27:82:FB:2A:52:84:6F:B2:05:9E:7C:4D:CD:28:79 Certificate issuer: /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Certificate serial: 1316C4342B7657E2BF48125B932971564A526903 Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa Signing time: Sun 06 Oct 2024 04:45:20 +0000 ROA not before: Sun 06 Oct 2024 04:40:20 +0000 ROA not after: Sun 05 Oct 2025 04:45:20 +0000 asID: 200226 IP address blocks: 2a0a:6040:3a00::/40 maxlen: 48 Validation: OK Signature path: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:16:c4:34:2b:76:57:e2:bf:48:12:5b:93:29:71:56:4a:52:69:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9 Validity Not Before: Oct 6 04:40:20 2024 GMT Not After : Oct 5 04:45:20 2025 GMT Subject: CN=C9A11CED9A2782FB2A52846FB2059E7C4DCD2879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ce:04:17:bf:6f:56:26:9b:5b:b8:63:c2:66: 20:e0:0c:db:eb:d8:94:17:fe:41:bc:9a:73:49:58: 61:c2:4f:d7:d4:5b:0b:9f:b1:4d:98:2e:fd:7e:76: 71:e1:06:14:f6:07:75:67:67:f8:f3:97:48:4f:de: 6d:f5:d7:b3:e8:60:ed:39:2d:30:3c:86:ae:15:9c: 6b:ec:d3:31:15:21:3e:f6:3a:1d:e5:f6:7c:ab:20: 08:58:dc:b2:f4:44:01:90:ed:3a:79:67:3a:d8:cf: 2b:2f:b2:67:fc:ab:00:a5:7c:18:1f:34:e3:34:ca: 5f:06:12:b5:b5:15:7a:a0:18:4f:e7:15:49:f7:bb: 0e:24:e3:26:fd:da:76:a4:86:72:01:35:3a:6d:ef: b2:bc:06:1d:23:c9:25:b3:95:19:c7:af:16:a9:cf: f7:5b:ad:52:ab:0d:d9:05:16:9a:9c:c8:17:31:d6: 42:cf:3a:ee:d0:6f:4f:07:f0:c9:c8:bd:e2:60:4d: 3f:2c:91:60:36:f7:ef:3f:69:f6:10:7f:7c:6a:86: 12:d0:bd:a2:0e:ea:15:fa:97:37:27:7f:0b:c7:3c: a9:23:57:6f:b1:40:df:1f:07:fc:f9:bb:96:37:8d: f9:15:9d:e6:bc:ba:b8:9b:bc:90:16:da:bd:c5:20: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A1:1C:ED:9A:27:82:FB:2A:52:84:6F:B2:05:9E:7C:4D:CD:28:79 X509v3 Authority Key Identifier: keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer Subject Information Access: Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200226.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6040:3a00::/40 Signature Algorithm: sha256WithRSAEncryption ae:c1:9c:0a:7e:d0:59:6e:10:39:33:95:d3:55:28:01:c4:79: 4d:80:37:5e:d4:89:8f:18:59:21:90:28:8f:7c:d2:1a:d9:f9: 37:69:a1:9f:69:93:23:5c:f4:84:16:13:c1:a0:f6:3a:de:70: 9e:6a:17:e3:e6:90:da:25:a2:d4:eb:f8:f2:9c:c2:e3:ec:91: 00:d5:f0:6f:47:5a:49:93:63:0b:87:04:cb:cc:90:2b:58:eb: 89:04:b0:d9:b7:04:54:14:11:96:b0:df:98:a7:41:ab:d0:b5: 39:4a:cb:ec:7a:0c:fb:72:8c:9c:bf:e4:c5:39:f2:64:d6:22: 3f:39:41:b3:05:2c:07:08:70:94:63:16:e7:0f:92:ae:48:83: 63:1b:96:e5:be:3a:0d:2e:db:9f:49:fd:80:6f:5a:cd:93:57: f9:24:60:fb:50:47:1a:c3:15:35:74:dc:40:08:8b:5f:fd:4c: c6:5d:7c:fa:be:aa:6f:67:7f:f8:25:39:92:21:8d:c0:3e:c7: 10:be:fd:8e:79:63:e7:fe:e1:4f:fb:21:5f:08:70:d4:f3:59: 7e:f9:81:85:2f:3e:1b:84:c0:53:a9:9a:b3:2e:4b:f6:54:68: 0d:6e:80:28:0d:af:9b:a0:15:b6:4f:71:18:67:64:6c:a3:ae: a5:4c:05:ab -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUExbENCt2V+K/SBJbkylxVkpSaQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOTAeFw0yNDEwMDYwNDQwMjBaFw0yNTEwMDUwNDQ1MjBaMDMxMTAvBgNV BAMTKEM5QTExQ0VEOUEyNzgyRkIyQTUyODQ2RkIyMDU5RTdDNERDRDI4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwzgQXv29WJptbuGPCZiDgDNvr 2JQX/kG8mnNJWGHCT9fUWwufsU2YLv1+dnHhBhT2B3VnZ/jzl0hP3m3117PoYO05 LTA8hq4VnGvs0zEVIT72Oh3l9nyrIAhY3LL0RAGQ7Tp5ZzrYzysvsmf8qwClfBgf NOM0yl8GErW1FXqgGE/nFUn3uw4k4yb92nakhnIBNTpt77K8Bh0jySWzlRnHrxap z/dbrVKrDdkFFpqcyBcx1kLPOu7Qb08H8MnIveJgTT8skWA29+8/afYQf3xqhhLQ vaIO6hX6lzcnfwvHPKkjV2+xQN8fB/z5u5Y3jfkVnea8uribvJAW2r3FIJv7AgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQUyaEc7ZongvsqUoRvsgWefE3NKHkwHwYDVR0j BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3 NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5 bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2 M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w L0FTMjAwMjI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAOBAIAAjAIAwYAKgpgQDowDQYJKoZIhvcNAQELBQADggEBAK7B nAp+0FluEDkzldNVKAHEeU2AN17UiY8YWSGQKI980hrZ+TdpoZ9pkyNc9IQWE8Gg 9jrecJ5qF+PmkNolotTr+PKcwuPskQDV8G9HWkmTYwuHBMvMkCtY64kEsNm3BFQU EZaw35inQavQtTlKy+x6DPtyjJy/5MU58mTWIj85QbMFLAcIcJRjFucPkq5Ig2Mb luW+Og0u259J/YBvWs2TV/kkYPtQRxrDFTV03EAIi1/9TMZdfPq+qm9nf/glOZIh jcA+xxC+/Y55Y+f+4U/7IV8IcNTzWX75gYUvPhuEwFOpmrMuS/ZUaA1ugCgNr5ug FbZPcRhnZGyjrqVMBas= -----END CERTIFICATE-----Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org